Email addresses used in unauthorized marketing campaigns are often acquired through data scraping, purchasing from third-party vendors, or hacking into databases. These methods are illegal and can result in severe penalties. It's crucial to understand that acquiring email addresses through dishonest means not only damages your brand reputation but also risks legal action.